This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer File: V-lT6Re6lbeqwtI77rwX8kxvf2k.cer (raw, json) Hash identifier: cr2YMK3sIeWlZgx5mqpVUfUqbdrKhNPcT5Z65Gjd7NQ= Subject key identifier: 57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69 Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669 Certificate serial: 019BD64B9D9A30F92D2F87470136940D3680 Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/ Notify URL: https://rrdp.ripe.net/notification.xml Certificate not before: Mon 19 Jan 2026 12:47:18 +0000 Certificate not after: Thu 01 Jul 2027 00:00:00 +0000 Subordinate resources: AS: 214933 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:4b:9d:9a:30:f9:2d:2f:87:47:01:36:94:0d:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669 Validity Not Before: Jan 19 12:47:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:77:88:be:dd:3c:72:20:78:6e:79:aa:aa:b3: 70:05:1f:ac:ea:4d:2b:27:6c:5a:fe:b4:56:9f:d6: f7:15:5e:26:8e:f4:6f:fd:00:19:f8:fd:b4:98:36: 46:5c:d0:17:3b:e9:d3:fa:1f:2c:7b:89:7b:f8:17: d1:5c:31:aa:54:3d:9b:cf:6f:53:50:cb:22:3c:b6: 5b:94:e2:31:fd:39:21:7c:89:6b:c8:a2:98:53:2a: 6a:70:0e:c4:5e:ff:9f:18:99:51:33:c0:35:aa:c0: ee:68:46:72:d2:df:46:41:05:38:3c:f0:66:14:99: 02:25:de:37:bf:a7:fa:07:34:ad:86:13:26:47:30: 52:f1:5b:1f:67:87:0d:27:6e:ce:21:5f:2e:8c:03: 39:7c:81:58:33:a9:26:08:13:46:97:1c:7f:46:28: 4a:9f:db:cd:e6:fe:c5:dd:1e:01:01:39:70:42:68: 9d:55:f2:c6:9d:d6:49:de:f6:00:b1:0b:45:76:75: 21:2b:53:ab:bd:c6:61:30:f7:a7:24:a8:1a:30:8e: 46:d4:3f:b0:e1:c3:69:ab:ca:a6:2b:fc:62:d8:c1: c0:a2:f9:a9:31:58:94:40:72:ee:7c:ac:01:b0:65: d8:c5:63:bb:8f:b7:ff:e9:08:b3:39:d3:46:a5:f3: f6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69 X509v3 Authority Key Identifier: keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69 X509v3 Basic Constraints: critical CA:TRUE X509v3 Key Usage: critical Certificate Sign, CRL Sign Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer Subject Information Access: CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/ RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft RPKI Notify - URI:https://rrdp.ripe.net/notification.xml X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-autonomousSysNum: critical Autonomous System Numbers: 214933 Signature Algorithm: sha256WithRSAEncryption 47:64:55:8a:66:3b:fb:04:a6:bc:e5:d2:40:8e:09:56:46:d2: f6:2f:96:77:b4:87:4d:c1:6b:a3:3c:16:4a:64:d2:8d:ed:8a: ab:cd:31:b2:10:f5:84:8d:52:51:65:cd:97:6b:15:ce:2e:5c: 62:e3:05:62:1d:58:11:ad:f3:a7:0c:8b:d5:d9:99:a2:c2:66: 56:2a:28:7f:f0:c5:40:73:24:c3:17:43:a4:e7:2b:01:4f:45: 6e:76:39:9b:75:d5:f2:4f:e5:27:a4:39:75:95:d3:0e:ce:52: 80:a6:f6:58:31:29:5b:36:7f:53:03:5e:25:e3:ed:a2:40:76: 61:f2:3b:32:17:b2:44:26:8d:dc:cc:9b:92:1b:9f:d1:fe:cf: d6:54:ca:56:54:f4:65:4f:87:c6:cf:f6:25:b6:b4:9a:71:e9: 6b:59:99:57:ea:f6:6f:ca:af:31:87:a9:8b:0e:8b:d1:e1:5c: 10:74:cb:24:3f:96:9d:07:e3:2f:ab:e4:af:3b:60:6e:b8:24: 99:f8:a7:c7:f0:56:22:a4:6c:23:a2:8d:d3:8f:9f:6c:c2:84: 02:97:98:98:28:99:42:29:45:ba:d6:16:0d:61:38:8b:1a:0c: 1f:49:d4:66:48:31:37:91:18:43:25:4a:10:f5:ba:3a:af:09: 41:69:a0:1a -----BEGIN CERTIFICATE----- MIIFczCCBFugAwIBAgISAZvWS52aMPktL4dHATaUDTaAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk ZGU2NjkwHhcNMjYwMTE5MTI0NzE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2U5NTNlOTE3YmE5NWI3YWFjMmQyM2JlZWJjMTdmMjRjNmY3ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXeIvt08ciB4bnmqqrNwBR+s6k0r J2xa/rRWn9b3FV4mjvRv/QAZ+P20mDZGXNAXO+nT+h8se4l7+BfRXDGqVD2bz29T UMsiPLZblOIx/TkhfIlryKKYUypqcA7EXv+fGJlRM8A1qsDuaEZy0t9GQQU4PPBm FJkCJd43v6f6BzSthhMmRzBS8VsfZ4cNJ27OIV8ujAM5fIFYM6kmCBNGlxx/RihK n9vN5v7F3R4BATlwQmidVfLGndZJ3vYAsQtFdnUhK1OrvcZhMPenJKgaMI5G1D+w 4cNpq8qmK/xi2MHAovmpMViUQHLufKwBsGXYxWO7j7f/6QizOdNGpfP2nwIDAQAB o4ICfzCCAnswHQYDVR0OBBYEFFfpU+kXupW3qsLSO+68F/JMb39pMB8GA1UdIwQY MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzBiLzdkOTM0 OS0zNjAzLTQ2MDUtYjE0Zi1hMGViZGM5NmI1MzMvMS8wfAYIKwYBBQUHMAqGcHJz eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGIvN2Q5MzQ5 LTM2MDMtNDYwNS1iMTRmLWEwZWJkYzk2YjUzMy8xL1YtbFQ2UmU2bGJlcXd0STc3 cndYOGt4dmYyay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwNHlTANBgkqhkiG9w0BAQsFAAOCAQEAR2RVimY7+wSm vOXSQI4JVkbS9i+Wd7SHTcFrozwWSmTSje2Kq80xshD1hI1SUWXNl2sVzi5cYuMF Yh1YEa3zpwyL1dmZosJmVioof/DFQHMkwxdDpOcrAU9FbnY5m3XV8k/lJ6Q5dZXT Ds5SgKb2WDEpWzZ/UwNeJePtokB2YfI7MheyRCaN3Mybkhuf0f7P1lTKVlT0ZU+H xs/2Jba0mnHpa1mZV+r2b8qvMYepiw6L0eFcEHTLJD+WnQfjL6vkrztgbrgkmfin x/BWIqRsI6KN04+fbMKEApeYmCiZQilFutYWDWE4ixoMH0nUZkgxN5EYQyVKEPW6 Oq8JQWmgGg== -----END CERTIFICATE-----Generated at Wed Jan 21 08:53:50 2026 by rpki-client